This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft
File:                     VwO1XNjigCKWBKELyM9bOAERY_o.mft (raw, json)
Hash identifier:          7KJvDC2KFbsGhkh2qq8eipfl6j+YUS39A0wGvT3UUHc=
Subject key identifier:   BE:94:88:EE:86:EB:12:F3:39:40:83:A3:B9:0C:7A:0F:BD:ED:C1:88
Authority key identifier: 57:03:B5:5C:D8:E2:80:22:96:04:A1:0B:C8:CF:5B:38:01:11:63:FA
Certificate issuer:       /CN=A9183EB3/serialNumber=5703B55CD8E280229604A10BC8CF5B38011163FA
Certificate serial:       0AC8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft
Manifest number:          0AC1
Signing time:             Sat 06 Dec 2025 18:43:00 +0000
Manifest this update:     Sat 06 Dec 2025 18:42:59 +0000
Manifest next update:     Sat 13 Dec 2025 18:42:59 +0000
Files and hashes:         1: VwO1XNjigCKWBKELyM9bOAERY_o.crl (hash: EhJV+l4jkf7KRSTnmWfwA0dvo0JaXNtwp+4Eagyuxio=)
                          2: D67C31E8637511EA8A698E0BC4F9AE02.roa (hash: 0G9HtTLZBqQUwE8UGiq72iqUjTtI4Gz6+fEdMQN9vkU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.crl
                          rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 18:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2760 (0xac8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183EB3, serialNumber=5703B55CD8E280229604A10BC8CF5B38011163FA
        Validity
            Not Before: Dec  6 18:42:59 2025 GMT
            Not After : Dec 13 18:42:59 2025 GMT
        Subject: CN=69347933-a61e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4c:17:1e:90:cc:33:1f:92:5f:23:08:b9:e7:
                    d5:7f:49:3a:1d:da:ce:f8:32:fd:ce:92:e4:ad:81:
                    c8:58:3f:00:f8:ef:3c:55:20:cf:6b:ec:15:d9:9b:
                    b9:2a:48:2c:77:c2:89:0f:9d:4d:4b:9f:b5:12:f2:
                    55:09:3f:ee:c5:7d:c0:20:fd:f1:a9:12:45:37:16:
                    4d:73:56:86:cd:25:87:8c:a3:0a:e4:36:e3:0f:f9:
                    03:32:09:89:08:54:73:74:22:82:3d:59:68:65:f5:
                    f7:b1:81:9c:6e:6e:62:19:ba:ba:8a:33:34:57:4c:
                    29:e8:91:a5:47:8b:0e:ee:60:c6:d9:30:68:80:1e:
                    ad:7c:43:3e:38:28:b6:02:66:b8:2c:28:d4:f9:74:
                    b2:9e:db:fd:66:62:a2:2b:05:97:86:74:bd:b8:00:
                    2b:0d:e7:87:d4:dd:ca:fc:b6:09:cf:e9:c7:47:26:
                    e2:7e:ef:23:19:6d:66:71:9b:5c:3b:d3:97:bd:a5:
                    e9:68:d8:34:a2:a5:79:2f:90:13:d9:ac:50:d1:53:
                    2d:57:00:8c:bd:04:5f:86:17:22:06:bd:38:9c:b7:
                    d1:b4:65:b2:5d:d8:cb:85:5c:f8:40:00:1f:08:83:
                    90:e7:ab:b4:f5:33:c3:56:9a:7f:81:56:92:5d:7b:
                    cb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:94:88:EE:86:EB:12:F3:39:40:83:A3:B9:0C:7A:0F:BD:ED:C1:88
            X509v3 Authority Key Identifier:
                keyid:57:03:B5:5C:D8:E2:80:22:96:04:A1:0B:C8:CF:5B:38:01:11:63:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:d4:17:24:31:2a:25:62:45:e4:4b:bb:fe:a6:ce:cc:eb:6a:
         a9:01:79:89:79:e7:90:84:77:bb:64:59:1e:04:81:a5:65:22:
         cb:06:94:f8:5c:f3:af:2f:75:df:3a:e4:8c:ca:43:a2:e3:cf:
         4e:0c:cc:8b:5a:71:6f:a1:d3:2d:3e:b9:c3:47:5a:49:a1:1f:
         c3:5d:7d:83:22:8c:ec:d2:98:8f:98:e4:68:72:e0:52:cf:95:
         85:4d:d0:31:d9:71:cc:de:7c:9e:9e:5d:10:23:63:e2:a8:0a:
         68:2c:f3:03:73:dc:69:7b:8b:67:50:9e:66:46:05:90:dc:7e:
         48:0a:5f:e4:63:37:33:df:a3:b1:1a:cd:bb:ca:13:20:31:a4:
         ef:27:a7:0d:2e:c8:24:eb:6e:e5:62:e0:59:de:4b:5c:b8:0c:
         9b:34:3c:1a:2e:c4:c8:57:3b:b2:16:8d:72:fa:0b:2c:2d:d1:
         c3:d4:98:f0:af:13:d2:1c:df:0e:33:d4:03:95:ed:39:04:a9:
         04:c9:68:a4:0f:0d:16:84:4a:4b:db:2c:9a:e6:59:55:d4:1e:
         68:45:c3:ef:68:f9:e8:da:a6:2a:3b:31:d2:25:19:1c:c8:4f:
         61:f7:e3:bf:df:6f:8f:c9:ff:37:c2:1b:12:79:3c:34:ce:07:
         27:1a:29:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:01:32 2025 by rpki-client